After installing ACDI and configuring it with OpenText Identity Manager, you must manually import the ACDI certificate into the following locations:
Identity Vault (cacerts) at /opt/netiq/common/jre/lib/security/cacerts
For example, you can use the following keytool command to import the ACDI certificate into the Identity Vault:
/opt/netiq/common/jre/bin/keytool -importkeystore -srckeystore <acdi-cert> -srcstorepass <cert-pass> -destkeystore /opt/netiq/common/jre/lib/security/cacerts -deststorepass <cacerts-pass> -noprompt
User Application (idm.jks) at /opt/netiq/idm/apps/tomcat/conf/idm.jks
For example, you can use the following keytool command to import the ACDI certificate into User Application:
/opt/netiq/common/jre/bin/keytool -importkeystore -srckeystore <acdi-cert> -srcstorepass <cert-pass> -destkeystore /opt/netiq/idm/apps/tomcat/conf/idm.jks -deststorepass <idm.jks-pass> -noprompt